SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/padlock-https-not-honest

A website shows a padlock and https. What does that tell you?

The connection is encrypted. It does not mean the site is honest.

Start playing free

The Just Right card

Too littleNever trust any website
Too muchPadlock means safe, buy away
Just rightPadlock is a start, still check the site

Huh, didn't know that: A wrong domain may swap .gov for .com or contain misspellings.

The dad joke
Why did the spider get a computer? To check its website.
Like this card?
Play the game

References

Answer: The connection is encrypted, not that the site is honest. The lock means traffic between your browser and the site is encrypted. A scam site can use encryption too, so check the address before signing in or paying.

  1. FBI Internet Crime Complaint Center (IC3): Cyber Actors Exploit 'Secure' Websites in Phishing Campaigns www.ic3.gov/PSA/2019/PSA190610
    Do not trust a website just because it has a lock icon or "https" in the browser address bar.
    Checked 2026-10-09.
  2. FBI Internet Crime Complaint Center (IC3): Cyber Actors Exploit 'Secure' Websites in Phishing Campaigns www.ic3.gov/PSA/2019/PSA190610
    The presence of "https" and the lock icon are supposed to indicate the web traffic is encrypted
    Checked 2026-10-09.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Tech & GadgetsThere's a thunderstorm outside. Which phone is risky to use indoors?Tech & GadgetsDoes charging a modern phone overnight automatically ruin its battery?Tech & GadgetsDoes a bigger charger charge faster?

That's stuff everyone should know.